How I found 40+ Directory Listing Vulnerabilities of Source Code Disclosure via Exposed WordPress…
アセットã®ä¸æ£å…¬é–‹é˜²æ¢ã¨ä¿®å¾© | Mandiant
最新ã®ãƒ¬ãƒãƒ¼ãƒˆã€ŒDefender's Advantage：防御å´ã®å„ªä½æ€§ - サイãƒãƒ¼ãƒ»ã‚¹ãƒŠãƒƒãƒ—ショットã€ã®è¨˜äº‹ã€Œã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆã«æŽ¥ç¶šã•ã‚Œã¦ã„る一般的ãªã‚¨ã‚¯ã‚¹ãƒ—ãƒã‚¤ãƒˆçµŒè·¯ã‚’検知ã™ã‚‹ã€ã«ãŠã„ã¦ã€Mandiantã¯æ”»æ’ƒã®çµŒè·¯ã¨ãªã‚Šå¾—るインターãƒãƒƒãƒˆä¸Šã§ä¸æ£ã«å…¬é–‹ã•ã‚Œã¦ã„るパスを特定ã—ã¾ã—ãŸã€‚ã“ã®ãƒ–ãƒã‚°ã§ã¯ã€å¤–部資産ã®ã‚»ã‚ュリティ強化ã«é–¢ã™ã‚‹Mandiantã®æŽ¨å¥¨äº‹é …ã‚’ã¾ã¨ã‚ã¦ã„ã¾ã™ã€‚ 図1： Mandiant Advantage Attack Surface Managementã«ã‚ˆã‚Šè¦³å¯Ÿã•ã‚ŒãŸå•é¡Œãƒˆãƒƒãƒ—5（2022å¹´1月1日～2022å¹´3月31日）外部アセットã®æŽ¢ç´¢ã€ãƒªã‚¹ãƒˆã‚¢ãƒƒãƒ—ã€ä¸æ£å…¬é–‹ã®æ¤œçŸ¥Â   攻撃者ã¯ã€è„†å¼±ãªå¤–部アセットや è¨å®šãƒŸã‚¹ã‚’エントリãƒã‚¤ãƒ³ãƒˆï¼ˆåˆæœŸä¾µå…¥ãƒ™ã‚¯ã‚¿ãƒ¼ï¼‰ã¨ã—ã¦åˆ©ç”¨ã—ã€åµå¯Ÿã€æ°´å¹³å±•é–‹ã€ã‚¢ã‚¯ã‚»ã‚¹ã®ç¶æŒã‚’図りã€ãƒŸãƒƒã‚·ãƒ§ãƒ³ã‚’é”æˆã—よã†ã¨ã—ã¾ã™ã€‚外部アセットを悪用ã™ã‚‹æœ€åˆã®ä¾µ
1
リリースã€éšœå®³æƒ…å ±ãªã©ã®ã‚µãƒ¼ãƒ“スã®ãŠçŸ¥ã‚‰ã›
最新ã®äººæ°—エントリーã®é…ä¿¡
j次ã®ãƒ–ックマーク
kå‰ã®ãƒ–ックマーク
lã‚ã¨ã§èªã‚€
eコメント一覧を開ã
oページを開ã
Water ICS Exposures Highlight Vulnerabilities in Critical Infrastructure Security
May 4, 2024: Over Half of Exposed Tinyproxy Instances Potentially Vulnerable to Trivial Exploit CVE-2023-49606
GitHub - spekulatius/infosec-dorks: A Personal Collection of Infosec Dorks
Uncovering Adversarial LDAP Tradecraft
GitHub - redhuntlabs/BucketLoot: BucketLoot is an automated S3-compatible bucket inspector that can help users extract assets, flag secret exposures and even search for custom keywords as well as Regular Expressions from publicly-exposed storage buckets b
Safe to expose Active Directory via LDAPS externally?
Docker Registries and their secrets
How to prevent origin server IP address behind CDN from exposed, like Cloudflare?
Cyber Defense Search Engine | ONYPHE
GitHub - SummitRoute/aws_exposable_resources: Resource types that can be publicly exposed on AWS
Leaking Git Repositories From Misconfigured Sites
{{#tags}}- {{label}}
{{/tags}}